Network Security

Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

“Join

 
Labels

Forum Posts

I'm currently running PIX 7.0.4.10 and preparing for an ASA conversion.  In anticipation of the move I've been cleaning up the configs and decided to turn on ICMP &ICMP Error Inspection so I could get replace the "permit icmp any any" statement on my...

Hi, I was wanting to know what people use to document firewall rules. We have a reasonably complex set of rules and NATs etc.  At present I am using Excel as I think it would be very difficult to make an easy to read Visio diagram. But Excel is not t...

scottyd by Level 1
  • 1482 Views
  • 3 replies
  • 0 Helpful votes

Not being too familiar with the ASA, I have everything configured I need and it is working. The problem now is, I am trying to get an additional external IP address working to point to a new server inside our network. In many other firewalls and even...

ronwoods by Level 1
  • 2606 Views
  • 10 replies
  • 0 Helpful votes

How do you see who else is consoled in an ASA.I know:sh ssh sessionssh asdm sessions.What about telnet?or the console port?What about what level the user is at. On any connection, can you tell what privilege level they are at?

westcare by Level 1
  • 704 Views
  • 1 replies
  • 0 Helpful votes

Is it possible to exclude traffic which be default goes to IDSM. I have following scenario:LAN-->IDSM->FWSM-->Server VLANIDSM and FWSM are in one single chassis and all the traffic coming from LAN is captured and forwarded to IDSM before it hits FWSM...

oqureshi by Level 1
  • 2070 Views
  • 3 replies
  • 0 Helpful votes

Hallo what can generally cause increasing of untranslate_hits on PIXos 7.0(4) like this: match tcp inside host 192.168.x.x eq 22 outside any static translation to PATAddr/222 translate_hits = 0, untranslate_hits = 24 thanks Pavel

brandon78 by Level 1
  • 815 Views
  • 1 replies
  • 0 Helpful votes

Hi,Could any1 say to avoid the folowing interface errors 727 L2 decode drops949 overrun------------------ show interface ------------------Interface Ethernet0/0 "XXX", is up, line protocol is up  Hardware is i82546GB rev03, BW 100 Mbps Full-Duplex(Fu...

Hello,With a home router such as a dlink router, the user can set a static lease base on MAC address with DHCP.  What this does is it will address a specific IP address within the DHCP pool according to the MAC address of the device.  The benefit of ...